Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa
File:                     265C5E7002CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=
Subject key identifier:   3D:A8:5F:FF:C4:CE:83:C1:3B:E1:FF:04:FA:34:96:10:52:D2:B1:B4
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2697
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:16:22 +0000
ROA not before:           Mon 20 Jul 2026 16:16:22 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132229
IP address blocks:        203.177.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9879 (0x2697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:16:22 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e49d6-1fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:b7:80:80:5c:ba:04:e3:3a:c3:4a:0d:ef:
                    b5:c3:dd:f1:b2:0f:46:66:b7:80:57:b0:55:a8:16:
                    c1:5a:32:d0:54:00:60:58:00:e5:50:64:0e:e3:63:
                    18:e1:42:8d:75:5d:6e:b6:ae:26:73:fc:2c:e3:1c:
                    ec:6f:fa:a0:04:1c:be:df:cc:03:2c:e9:e3:87:9d:
                    03:9f:9a:4a:06:81:41:25:f9:eb:82:96:53:3d:8e:
                    d0:d3:08:d6:69:e9:e8:3f:65:e3:42:6f:7b:10:d8:
                    5a:ec:f9:74:a6:bf:75:c0:c3:f8:fe:30:3b:61:eb:
                    20:47:94:c2:ba:a1:95:96:47:7d:7a:b5:d3:1a:19:
                    76:dd:bb:0b:92:c8:32:91:6a:dc:6f:7b:5e:d5:2e:
                    e8:ca:bc:33:2d:2c:7a:93:21:41:e8:18:15:b6:22:
                    df:38:a0:28:d6:c3:95:f7:79:cc:b1:72:18:20:5b:
                    f4:c6:c6:41:42:13:95:76:c2:6d:75:af:8b:69:66:
                    0c:36:2a:dd:4a:e5:2b:7e:f5:8d:4f:72:92:9e:66:
                    c1:b2:6c:c9:3b:7d:2a:bd:f9:bc:85:1a:d7:6b:d1:
                    66:06:0c:ea:fc:a9:ff:7f:38:a2:b5:5e:2b:f4:15:
                    38:d2:77:d1:d1:7f:50:d2:32:8d:ec:0b:2d:6e:54:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:5F:FF:C4:CE:83:C1:3B:E1:FF:04:FA:34:96:10:52:D2:B1:B4
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:f9:f3:b5:37:4f:1c:56:35:28:01:9c:99:a0:87:69:2f:
         0b:2a:e1:fc:f5:3e:14:d5:4a:f1:e9:b5:a5:50:49:ff:30:07:
         5c:7d:1d:ab:d7:00:32:9f:3f:53:99:47:f4:ab:4e:b8:43:9c:
         a2:ec:97:72:06:86:5d:a8:47:91:43:94:6b:8a:ec:76:c7:d4:
         37:32:42:c8:67:76:3e:c1:f3:4d:05:4e:d5:45:4e:de:d5:fd:
         51:0b:41:42:90:a7:b1:b7:4e:f2:f0:f3:0d:6f:be:88:0f:dc:
         27:f0:45:71:bb:1e:21:e9:d0:03:22:1a:28:e3:0e:c5:84:80:
         fe:7d:80:3c:52:e1:ba:57:fb:be:ee:ee:b8:8a:fe:65:3b:01:
         3e:66:1e:8f:66:39:4a:e6:77:29:ab:cd:9f:8e:b4:77:cb:8c:
         a7:76:40:26:89:b2:eb:f7:d7:a1:3b:43:7a:18:9c:df:26:a6:
         97:07:69:f3:4a:74:7b:40:ae:21:f5:9e:21:3d:ff:c9:26:98:
         46:49:d1:c6:d1:22:9f:85:63:6e:61:39:ae:ff:cf:87:ea:02:
         25:56:11:73:ed:19:2d:bb:d4:31:47:48:af:12:57:21:7e:ec:
         db:db:78:c1:5a:52:86:79:6a:af:9b:78:6b:ae:f6:4b:a5:29:
         fb:66:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:10 2026 by rpki-client